Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa
File: 9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa (raw, json)
Hash identifier: AcgbAUmwltebu1uvA8vUAVrLF1mTLdB3CzhMe05AbWg=
Subject key identifier: 0E:45:E3:24:D6:BE:C6:42:92:50:7E:37:E0:92:A5:F7:00:28:0A:5A
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 36E83643D408BEF76280F4BD83D3C128ADCC5E13
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa
Signing time: Mon 03 Feb 2025 00:00:00 +0000
ROA not before: Mon 03 Feb 2025 00:00:00 +0000
ROA not after: Mon 10 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2406:daf4:7000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 03 Feb 2025 16:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e8:36:43:d4:08:be:f7:62:80:f4:bd:83:d3:c1:28:ad:cc:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000
Validity
Not Before: Feb 3 00:00:00 2025 GMT
Not After : Mar 10 23:59:59 2025 GMT
Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:8a:69:59:f1:5d:4f:97:1d:8a:bf:83:01:
12:e2:4f:7a:d4:51:9c:d5:53:d0:da:7d:80:e2:3c:
58:3d:a9:97:55:5d:a6:16:ec:9f:0c:4f:f3:49:19:
d2:87:bf:94:e5:79:5c:03:c7:ef:50:38:18:c7:e5:
d1:7d:04:73:46:a9:d6:7d:21:9b:e5:ee:14:5a:55:
83:70:dc:c9:80:d7:51:81:64:b3:bf:ad:ed:33:d8:
3d:fc:fc:67:c5:ec:67:cf:be:75:b3:23:65:2f:c6:
98:31:9b:1f:26:29:79:d2:75:6c:5b:e3:91:05:d8:
67:8e:99:69:74:27:67:39:45:a8:c1:a1:12:37:98:
6d:61:e9:9f:58:d5:4c:08:8f:02:a9:a2:3a:a3:54:
16:47:21:b1:ca:88:e8:b7:11:fc:65:1d:e4:2d:7a:
13:19:0c:fe:b2:c0:dd:47:57:f1:d9:e9:47:a5:c6:
92:81:c1:b4:47:82:f1:f8:3f:7c:69:f0:62:23:6e:
de:a5:2f:c6:77:5a:ee:cf:b1:2a:42:31:15:a4:ee:
51:f5:97:66:61:55:fe:3b:c4:d1:53:4e:58:70:eb:
33:bf:7f:58:3d:3b:4c:49:0a:61:34:03:cb:cd:0a:
c7:79:4f:d8:d7:95:b4:5e:2a:a5:a5:a0:65:31:8a:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:E3:24:D6:BE:C6:42:92:50:7E:37:E0:92:A5:F7:00:28:0A:5A
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b5b30e6-63e2-4bfe-9e0b-d043ab10277b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:daf4:7000::/40
Signature Algorithm: sha256WithRSAEncryption
04:3a:9f:52:b4:a0:9f:14:98:f4:a3:5e:d1:ff:3b:5b:c7:6c:
b8:99:5b:cc:4e:6d:ed:71:50:05:06:45:d1:4b:f1:04:3f:10:
2e:78:75:e6:e6:3d:25:4c:ec:87:11:a5:df:78:07:f0:48:38:
a7:e3:b2:79:f2:02:ce:33:e5:cd:8f:0d:bd:37:b5:76:5e:1b:
bc:b1:2a:a7:a4:8b:77:f7:98:22:fd:b5:0b:b2:20:0a:00:9e:
84:b2:5f:39:75:53:79:65:da:e0:21:f5:07:c4:90:f2:d1:62:
71:78:e3:ca:d7:3e:23:33:49:a6:fd:90:d1:a0:fd:24:89:59:
f4:d5:d5:df:23:94:13:f5:43:57:4a:99:c6:52:cc:b6:c5:15:
f5:30:39:37:a4:9b:76:9e:55:7e:29:d4:31:a6:32:18:f1:2d:
ec:d2:7e:80:b5:20:f6:60:c7:78:e3:37:12:2b:85:eb:f1:db:
77:a5:ae:e9:00:31:19:10:1e:40:16:79:db:9f:32:60:d7:b2:
1c:a6:a4:0d:29:cc:44:7d:a7:30:9d:7f:c2:9b:86:4c:4a:d1:
fb:72:33:bf:27:0f:66:a2:3a:2f:39:92:f4:4d:07:6e:25:16:
c2:06:95:6f:2c:7d:1b:57:73:63:52:68:6c:a0:e3:8e:13:27:
e1:24:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:03:34 2025 by rpki-client